Technical Information
- %TEMP%\326d.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\326d.tmp' --ping<Full path to file> C8F81C62A8D471063F54D1710CBA78FA861334B25597A877B4EA54E225AFBE24C171C6BF1BF8FF224EBA0501220AE989DC14B32BBA2A106D66BA04B6424FA042
- '%TEMP%\326d.tmp' --ping<Full path to file> C8F81C62A8D471063F54D1710CBA78FA861334B25597A877B4EA54E225AFBE24C171C6BF1BF8FF224EBA0501220AE989DC14B32BBA2A106D66BA04B6424FA042' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"